This Privacy Policy describes how the personal data of people who visit the website https://alsagacirujanoplastico.com or who get in touch through it are processed, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Alberto Sánchez García (Dr. Alberto Sánchez García)
- Tax ID (NIF): 47400085Y
- Registered medical practitioner no. 24929
- Address: Avenida de Francia, 19, 46023 Valencia (Spain)
- Telephone: +34 601 58 15 42
- Email: info@alsagacirujanoplastico.com
2. What data we process and where it comes from
We only process the data you provide to us voluntarily, through the following channels:
- Contact and appointment request form: name, email address, telephone number and the content of the message or reason for consultation that you choose to include.
- Email, telephone or WhatsApp: the contact details associated with those channels and the information you include in your communication.
We do not obtain data from third parties or create profiles, and no automated decisions with legal effects on you are taken.
About health data. The forms on this website are not designed to collect clinical information. We recommend that you do not include health data, medical history, reports or clinical images in your message: it is enough to state the general reason for your consultation. If you nevertheless decide to provide them, we will understand that you do so with your explicit consent, and we will process them with the utmost confidentiality and for the sole purpose of dealing with your request. Clinical information as such will be collected, where appropriate, at the in-person consultation, subject to the applicable healthcare regulations.
3. Purposes and legal basis of the processing
| Purpose | Legal basis |
|---|---|
| Dealing with and responding to the enquiries, questions and requests for information sent through the website or other contact channels. | Consent of the data subject (Art. 6.1.a GDPR) and taking steps prior to entering into a contract at the request of the data subject (Art. 6.1.b GDPR). |
| Managing appointment requests and organising the practice’s schedule. | Consent of the data subject (Art. 6.1.a GDPR) and pre-contractual measures (Art. 6.1.b GDPR). |
| Processing, where applicable, the health data that the data subject chooses to communicate voluntarily in their message. | Explicit consent of the data subject (Art. 9.2.a GDPR) and, where appropriate, the provision of healthcare by a professional subject to professional secrecy (Art. 9.2.h GDPR). |
| Ensuring the technical operation, security and maintenance of the website. | Legitimate interest of the controller (Art. 6.1.f GDPR). |
| Complying with the applicable legal obligations. | Compliance with a legal obligation (Art. 6.1.c GDPR). |
We do not use your data to send you commercial communications unless you request it and give your express and separate consent.
4. Retention period
The data provided through the forms and other contact channels will be kept for as long as necessary to deal with your request and, once it has been resolved, for the limitation period of any liabilities arising from that relationship. After those periods, the data will be deleted or anonymised.
If your enquiry leads to a healthcare relationship, the clinical records will be kept in accordance with Spanish Law 41/2002, the basic law regulating patient autonomy and rights and obligations regarding clinical information and documentation, and with the applicable regional legislation.
5. Recipients of the data
No data are disclosed to third parties, except where required by law. However, in order to provide the service, the following providers are involved; they act as data processors and only access the data to the extent necessary to provide their services:
- Web hosting and email: Hostinger International Ltd., provider of the hosting services on which this website is hosted.
The website also loads resources from the following providers, which may obtain your IP address and technical browsing data:
- Google Ireland Limited — fonts (Google Fonts) and the map showing the location of the practice (Google Maps), on the contact page.
- Trustindex — display of public Google reviews.
You can find further details in our Cookie Policy.
6. International transfers
Some of the providers listed belong to business groups that may process information outside the European Economic Area. In such cases, these transfers are covered by the safeguards provided for in Chapter V of the GDPR, such as the standard contractual clauses approved by the European Commission or the adequacy decisions in force.
7. Your rights
You may exercise the following rights at any time:
- Access: to know which of your data we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request that your data be deleted when they are no longer necessary.
- Objection: to object to certain processing.
- Restriction: to request that processing be restricted in the cases provided for by law.
- Portability: to receive your data in a structured, commonly used format.
- Withdraw the consent you have given, at any time and without affecting the lawfulness of the processing carried out beforehand.
To exercise them, write to info@alsagacirujanoplastico.com or to the postal address Avenida de Francia, 19, 46023 Valencia (Spain), stating the right you wish to exercise and enclosing a copy of a document proving your identity.
If you consider that your rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).
8. Security and confidentiality
We apply appropriate technical and organisational measures to protect your data against destruction, loss, alteration or unauthorised access, including the encryption of the website’s communications by means of an SSL certificate. The controller and, where applicable, the staff involved in the processing are subject to the duty of professional secrecy.
9. Accuracy of data and minors
Users guarantee that the data provided are true and undertake to communicate any changes. If you provide data belonging to a third party, you must first have informed them of the content of this policy and have obtained their consent.
The forms on this website are intended for people over 14 years of age. In the case of minors under that age, the consent of the persons holding parental authority or guardianship will be required.
10. Changes to this policy
This Privacy Policy may be updated to adapt it to changes in legislation or to changes in the services offered. We recommend that you review it periodically.
Last updated: 31 August 2026.
